[Openswan Users] openswan to Cisco 877

Daniel Wittenberg daniel-wittenberg at starken.com
Thu May 3 10:31:05 EDT 2007


In this type of setup, how do you configure the rightid/leftid info on
the cisco side?  I think this might fix an issue I've got but the cisco
person I'm dealing with says you can't set those and so when I do on the
openswan side the connection fails.  Ideas?

Dan

> > conn openswan-cisco877
> >     type=tunnel
> >     keyexchange=ike
> >     #keylife=1h
> >     ikelifetime=5h
> >     rekeyfuzz=50%
> >     rekeymargin=10s
> >     keyingtries=%forever
> >     dpddelay=5
> >     dpdtimeout=15
> >     dpdaction=restart
> >     disablearrivalcheck=yes
> >     pfs=no
> >     esp=3des-md5
> >     left=192.168.254.93
> 
> Left needs to be your internet ip, or if you don't have one,
> Because your not a gateway just a lan host, then you need to
> Use nat_traversal=yes, the cisco will also need to set nat-t.
> 
> >     leftnexthop=192.168.254.2
> >     right=RemoteCisco_WAN_IP
> >     rightsubnet=192.168.0.0/24
> >     leftsubnet=192.168.1.0/24
> >     authby=secret
> >     rightid=@ciscopeer
> >     leftid=@openswanpeer
> >     auto=start
> > 


More information about the Users mailing list